This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VJ3RsVxE7mkMezIvGQ6Jdvy9peI.roa File: VJ3RsVxE7mkMezIvGQ6Jdvy9peI.roa (raw, json) Hash identifier: CGvvIjanhw1lyVv6SNPmKOn56AoP0zhGKh4NdnvUAoA= Subject key identifier: 54:9D:D1:B1:5C:44:EE:69:0C:7B:32:2F:19:0E:89:76:FC:BD:A5:E2 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EDA6F5159F61835A9A3B7395D93E4 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VJ3RsVxE7mkMezIvGQ6Jdvy9peI.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208318 IP address blocks: 88.203.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:da:6f:51:59:f6:18:35:a9:a3:b7:39:5d:93:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=549dd1b15c44ee690c7b322f190e8976fcbda5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:c8:5e:54:ac:93:20:6b:c2:a9:93:36:fc: 64:8f:b1:ed:d8:51:be:43:c4:24:34:ae:bc:69:84: ec:66:7b:50:64:b8:5c:b1:11:5f:44:4d:ec:42:f1: 0a:c3:ce:4d:1c:0d:2c:4e:15:6f:5b:14:c8:e8:7f: e5:64:48:77:1f:dd:44:46:4f:d8:52:0d:eb:b4:95: 5e:2d:4d:24:ba:67:e1:41:42:ae:37:03:a2:a8:b9: 76:c3:aa:c6:fe:c2:c9:2a:77:a6:ce:64:d6:e1:f3: d8:8d:ed:f4:e5:ba:d0:a9:f5:7a:a7:11:1c:11:de: 7e:a6:b1:aa:cd:2e:eb:53:4a:63:c9:cd:5c:1e:19: c8:37:f3:5b:4f:d2:31:2a:ba:ea:d0:d0:9d:c6:c2: 60:fb:87:61:3a:79:81:b3:4c:a6:61:8c:83:36:48: bf:92:bc:f7:9f:20:0c:29:d1:70:58:0b:36:d2:e6: a9:b1:82:ae:a5:64:92:47:e0:00:81:0a:3c:4e:22: 0b:e7:e3:fe:0f:3d:55:7e:47:7d:fe:dc:52:54:f1: 3c:6c:ce:b0:d6:6b:c5:e5:97:61:9a:67:7e:8f:90: b9:e9:94:6d:45:c2:31:72:34:da:8a:bc:ed:6b:79: 72:d8:d3:e8:66:34:bf:06:6a:7b:01:eb:7f:50:f7: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9D:D1:B1:5C:44:EE:69:0C:7B:32:2F:19:0E:89:76:FC:BD:A5:E2 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/VJ3RsVxE7mkMezIvGQ6Jdvy9peI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.203.205.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:b7:be:4f:aa:74:f2:d2:d6:20:b0:22:63:2f:a1:d9:6c:64: c9:76:08:0f:03:9c:5c:db:df:bd:3c:03:2e:b6:13:26:86:a8: 68:da:1e:2c:47:31:c2:f8:16:a1:92:06:1c:f5:45:53:3b:1d: 2f:35:6f:2c:e6:a3:3a:33:25:fd:d6:15:6a:49:50:f9:8f:9f: d9:bd:68:cf:b1:e2:80:aa:78:6c:66:b3:3e:46:5a:6c:98:6d: 31:92:18:11:fa:ea:db:d1:5e:c0:26:a3:6f:6c:0e:be:d8:70: 80:18:aa:72:e8:3e:0b:9e:e9:34:03:cd:fd:a3:5c:c7:82:b5: 6a:03:d7:a5:15:64:f7:b5:57:56:11:0c:34:f0:fa:1c:3f:e8: 85:86:38:03:8c:62:de:19:45:73:f7:c1:bb:00:12:e4:b6:81: fa:fe:14:23:0c:a8:98:db:e4:05:dc:12:97:39:9b:be:24:80: 26:17:6a:ce:9c:6e:0b:d8:32:a3:3e:3c:65:66:64:3e:71:55: 11:ad:05:13:80:af:a0:bb:c8:e7:9b:3a:49:c4:94:97:1f:e5: 7b:13:2d:b1:98:01:18:e3:a9:c4:c8:9d:e6:a7:f0:88:d2:fd: e1:64:d5:d4:56:a1:9b:9d:3f:6c:74:eb:d1:31:f1:00:61:b7: 29:39:3b:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftpvUVn2GDWpo7c5XZPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDlkZDFiMTVjNDRlZTY5MGM3YjMyMmYxOTBlODk3NmZjYmRhNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAXIXlSskyBrwqmTNvxkj7Ht2FG+ Q8QkNK68aYTsZntQZLhcsRFfRE3sQvEKw85NHA0sThVvWxTI6H/lZEh3H91ERk/Y Ug3rtJVeLU0kumfhQUKuNwOiqLl2w6rG/sLJKnemzmTW4fPYje305brQqfV6pxEc Ed5+prGqzS7rU0pjyc1cHhnIN/NbT9IxKrrq0NCdxsJg+4dhOnmBs0ymYYyDNki/ krz3nyAMKdFwWAs20uapsYKupWSSR+AAgQo8TiIL5+P+Dz1Vfkd9/txSVPE8bM6w 1mvF5Zdhmmd+j5C56ZRtRcIxcjTairzta3ly2NPoZjS/Bmp7Aet/UPfDEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFSd0bFcRO5pDHsyLxkOiXb8vaXiMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvVkozUnNWeEU3bWtNZXpJdkdRNkpkdnk5cGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWMvNMA0G CSqGSIb3DQEBCwUAA4IBAQCPt75PqnTy0tYgsCJjL6HZbGTJdggPA5xc29+9PAMu thMmhqho2h4sRzHC+BahkgYc9UVTOx0vNW8s5qM6MyX91hVqSVD5j5/ZvWjPseKA qnhsZrM+RlpsmG0xkhgR+urb0V7AJqNvbA6+2HCAGKpy6D4Lnuk0A839o1zHgrVq A9elFWT3tVdWEQw08PocP+iFhjgDjGLeGUVz98G7ABLktoH6/hQjDKiY2+QF3BKX OZu+JIAmF2rOnG4L2DKjPjxlZmQ+cVURrQUTgK+gu8jnmzpJxJSXH+V7Ey2xmAEY 46nEyJ3mp/CI0v3hZNXUVqGbnT9sdOvRMfEAYbcpOTsQ -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:21 2026 by rpki-client